TI-2026-22975 CVE-2026-28780 · GHSA-wpww-4qvv-xpv8
Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()
Priority MEDIUM 52
Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.
RHSA-2026:21391
httpd security update
Released 2026-05-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) httpd-2.4.62-13.el9_8.1, httpd-core-2.4.62-13.el9_8.1, httpd-devel-2.4.62-13.el9_8.1 +8
Fixes 5 records
TI-2026-26384 CVE-2026-34059 · GHSA-m35f-pf48-r38q
Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()
Priority LOW 39
Buffer Over-read vulnerability in Apache HTTP Server.
TI-2026-26358 CVE-2026-34032 · GHSA-9r79-gvhp-cr42
Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)
Priority LOW 31
Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.
TI-2026-25455 CVE-2026-33007 · GHSA-cj6w-grf6-jq78
Apache HTTP Server: mod_authn_socache crash
Priority LOW 31
A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.
TI-2026-26223 CVE-2026-33857 · GHSA-v5qg-p44g-5728
Apache HTTP Server: Off-by-one OOB reads in AJP getter functions
Priority LOW 30
Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server.